Hi,
I'm trying to send data to a specific index on our Splunk Cloud instance
I've tried several methods found in answers.splunk.com but still with no apparent success.
What I've tried:
/opt/splunkforwarder/bin/splunk add monitor /home/oracle/workdir/*csv -index top10
Parameters must be in the form '-parameter value'
# cat /opt/splunkforwarder/etc/system/local/inputs.conf
[default]
host = hostname omitted but it is there
"The code block has been omitted but it is there"
[monitor:///home/oracle/workdir/*csv]
sourcetype=csv
index=top10
The latter one was followed by a restart of the forwarder.
In Splunk, an all time search of `index=top10` yields 0 results. Not sure what I'm missing.
↧